>...but can't make any big steps to avoid alienating the userbase.

I think the way this could work is by linking certain capabilities to MDM or a developer program membership. Organisations and people who really need it would still be able to get it but regular users would not.